This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1587/024MD-rXgRtE3P6QTPshT7fqUPI.roa File: 024MD-rXgRtE3P6QTPshT7fqUPI.roa (raw, json) Hash identifier: gWTJ0yVuGKK/ElboTC2hxRBZygcD7gWF6CGUbfXs/N0= Subject key identifier: D3:6E:0C:0F:EA:D7:81:1B:44:DC:FE:90:4C:FB:21:4F:B7:EA:50:F2 Certificate issuer: /CN=49449B46CAECE75D1C558061394DB402B6D009BE Certificate serial: 22C7 Authority key identifier: 49:44:9B:46:CA:EC:E7:5D:1C:55:80:61:39:4D:B4:02:B6:D0:09:BE Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SUSbRsrs510cVYBhOU20ArbQCb4.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/024MD-rXgRtE3P6QTPshT7fqUPI.roa Signing time: Fri 19 Dec 2025 03:10:58 +0000 ROA not before: Fri 19 Dec 2025 03:10:58 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 132168 IP address blocks: 103.90.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/SUSbRsrs510cVYBhOU20ArbQCb4.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/SUSbRsrs510cVYBhOU20ArbQCb4.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SUSbRsrs510cVYBhOU20ArbQCb4.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 22:40:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8903 (0x22c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49449B46CAECE75D1C558061394DB402B6D009BE Validity Not Before: Dec 19 03:10:58 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=D36E0C0FEAD7811B44DCFE904CFB214FB7EA50F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:4f:82:41:3e:fe:4e:13:b8:6c:6b:af:a2:12: f9:17:79:90:f7:75:8f:64:5f:81:52:4b:f6:38:67: df:62:84:ee:12:ed:97:7d:70:06:19:72:b0:90:2e: 14:f2:a4:7b:f9:91:64:f8:78:3e:23:f8:69:17:1d: 30:28:0c:66:24:63:46:1c:5a:6c:dd:73:78:e8:0c: 28:3a:c6:39:a7:04:70:d1:41:45:d4:6a:68:7c:6a: 8b:dd:3c:8a:0a:e0:07:52:0b:ad:c5:02:10:e3:36: d5:5e:81:85:db:58:9e:78:36:e1:a7:88:f6:bd:43: be:5f:7a:27:22:6f:eb:b4:55:c9:af:da:a2:56:86: 15:85:25:b2:5c:c2:eb:dd:d9:c5:71:c2:c8:2c:b4: 3d:07:3e:6a:ee:67:c2:a0:91:8b:a1:e8:d7:f7:61: 20:3a:e1:bc:fe:cd:8c:06:1b:32:45:c3:47:78:10: b8:82:d2:a8:17:b5:be:e1:ea:3c:04:bb:d5:69:93: 72:da:86:87:63:ca:fb:03:3e:8c:6d:3f:f6:2a:a3: 5e:0c:a8:cd:7c:a4:38:bb:14:ca:00:f5:29:49:f3: 4d:02:27:22:d9:b5:a5:bd:3f:88:a7:f1:5d:04:59: f1:57:fc:aa:d8:e9:d7:af:cf:49:1c:6c:75:b2:7b: 61:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:6E:0C:0F:EA:D7:81:1B:44:DC:FE:90:4C:FB:21:4F:B7:EA:50:F2 X509v3 Authority Key Identifier: keyid:49:44:9B:46:CA:EC:E7:5D:1C:55:80:61:39:4D:B4:02:B6:D0:09:BE X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/SUSbRsrs510cVYBhOU20ArbQCb4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SUSbRsrs510cVYBhOU20ArbQCb4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/024MD-rXgRtE3P6QTPshT7fqUPI.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.90.57.0/24 Signature Algorithm: sha256WithRSAEncryption 37:af:08:d8:4f:13:4b:2c:cd:fe:5e:66:63:b5:b3:80:ef:70: 78:84:99:a7:4e:53:53:e7:8a:73:82:ea:36:04:76:3a:d2:44: 16:5c:90:70:c4:93:ac:59:29:27:38:ec:fe:1a:10:85:7d:01: ea:ee:51:01:f6:e0:01:32:b5:0c:e8:f0:c7:11:d1:70:02:f3: 7c:97:a3:68:b7:95:b0:4f:4d:11:82:ae:9a:53:e5:51:59:8a: cb:97:9d:bd:10:50:d3:ee:0a:6d:22:c3:0f:cd:35:75:d3:bf: 8c:d2:cb:95:98:d8:fa:05:05:17:0c:07:79:8a:a5:14:31:09: f8:8a:94:8e:9b:52:d6:da:1c:25:39:dc:81:83:3c:ee:14:58: 4c:8e:f0:e6:7f:e0:78:8b:ea:8e:6f:8f:95:14:74:e8:0d:e6: 31:33:4c:ba:50:11:52:2d:1c:f1:ad:8c:b9:69:f1:1b:72:45: a8:67:4c:01:19:db:32:7d:f9:be:47:6f:8a:8a:34:29:4d:07: 88:b0:f8:d1:f7:ce:40:cc:f3:99:08:7f:63:0f:96:8d:9d:8b: 48:71:7f:88:ca:c3:51:04:42:39:45:af:d3:95:4b:37:e5:e5: 10:33:d3:a6:51:ee:74:88:4a:c2:a7:aa:09:a5:cd:2c:1b:b4: 3c:8d:d4:76 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICIscwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDk0 NDlCNDZDQUVDRTc1RDFDNTU4MDYxMzk0REI0MDJCNkQwMDlCRTAeFw0yNTEyMTkw MzEwNThaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKEQzNkUwQzBGRUFENzgx MUI0NERDRkU5MDRDRkIyMTRGQjdFQTUwRjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDZT4JBPv5OE7hsa6+iEvkXeZD3dY9kX4FSS/Y4Z99ihO4S7Zd9 cAYZcrCQLhTypHv5kWT4eD4j+GkXHTAoDGYkY0YcWmzdc3joDCg6xjmnBHDRQUXU amh8aovdPIoK4AdSC63FAhDjNtVegYXbWJ54NuGniPa9Q75feicib+u0Vcmv2qJW hhWFJbJcwuvd2cVxwsgstD0HPmruZ8KgkYuh6Nf3YSA64bz+zYwGGzJFw0d4ELiC 0qgXtb7h6jwEu9Vpk3LahodjyvsDPoxtP/Yqo14MqM18pDi7FMoA9SlJ800CJyLZ taW9P4in8V0EWfFX/KrY6devz0kcbHWye2HhAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQU024MD+rXgRtE3P6QTPshT7fqUPIwHwYDVR0jBBgwFoAUSUSbRsrs510cVYBh OU20ArbQCb4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTU4 Ny9TVVNiUnNyczUxMGNWWUJoT1UyMEFyYlFDYjQuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1NVU2JSc3JzNTEwY1ZZQmhPVTIwQXJiUUNiNC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE1ODcvMDI0TUQtclhnUnRF M1A2UVRQc2hUN2ZxVVBJLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAGdaOTANBgkqhkiG9w0BAQsFAAOCAQEAN68I2E8TSyzN/l5mY7WzgO9weISZ p05TU+eKc4LqNgR2OtJEFlyQcMSTrFkpJzjs/hoQhX0B6u5RAfbgATK1DOjwxxHR cALzfJejaLeVsE9NEYKumlPlUVmKy5edvRBQ0+4KbSLDD801ddO/jNLLlZjY+gUF FwwHeYqlFDEJ+IqUjptS1tocJTncgYM87hRYTI7w5n/geIvqjm+PlRR06A3mMTNM ulARUi0c8a2MuWnxG3JFqGdMARnbMn35vkdvioo0KU0HiLD40ffOQMzzmQh/Yw+W jZ2LSHF/iMrDUQRCOUWv05VLN+XlEDPTplHudIhKwqeqCaXNLBu0PI3Udg== -----END CERTIFICATE-----Generated at Sun Dec 21 19:58:26 2025 by rpki-client